SolarMarket malware carried in some WordPress sites. Russian privateers don’t much like REvil’s takedown....
SolarMarket malware carried in some WordPress sites. Russian privateers don’t much like REvil’s takedown. The SVR in the supply chain. Malicious Squid Games app. Scary social media.
SolarMarket infestations are...
Counting coup against REvil (and other gangs are taking note). Export controls and dual...
Counting coup against REvil (and other gangs are taking note). Export controls and dual use. A timing bug will surface this weekend.
REvil’s troubles appear to be the work of...
Evil Corp identified as the threat actor behind ransomware attacks on Sinclair and Olympus....
Evil Corp identified as the threat actor behind ransomware attacks on Sinclair and Olympus. Privateering. Fin7’s front company. Sentencing in a bulletproof hosting case.
Evil Corp is identified as the...
Cyberespionage campaign looks a lot like SIGINT collection. Magnitude gets more capable. VPN exploits...
Cyberespionage campaign looks a lot like SIGINT collection. Magnitude gets more capable. VPN exploits solicited. Ransomware trends. Seven years for UPMC hacker. Plenty of Candy Corn coming.
The LightBasin “activity...
A US broadcaster sustains a ransomware attack. North Korean catphis expelled from Twitter. REvil’s...
A US broadcaster sustains a ransomware attack. North Korean catphis expelled from Twitter. REvil’s Tor sites are hijacked. Hacking back. Prosecution and responsible disclosure?
The Sinclair Broadcast Group discloses that...
TA505’s recent activity. Advice on defending organizations from BlackMatter. CISA RFI seeks EDR information....
TA505’s recent activity. Advice on defending organizations from BlackMatter. CISA RFI seeks EDR information. REvil’s halting attempts to return. Sinclair’s incident response.
A look at TA505, familiar yet adaptable. A...
CISA and its partners warn of threats to water and wastewater treatment facilities. The...
CISA and its partners warn of threats to water and wastewater treatment facilities. The curious case of Missouri teachers’ Social Security Numbers.
A CISA-issued Joint Advisory warns of threats and...
Cyber Espionage, again. Patched SolarWinds yet? Patch Tuesday. The international conference on ransomware has...
Cyber Espionage, again. Patched SolarWinds yet? Patch Tuesday. The international conference on ransomware has begun. Booter customers get a warning. A disgruntled insider alters aircraft records.
A Chinese-speaking APT is...
Notes from the underground: data breach extortion and a criminal market shuts down. International...
Notes from the underground: data breach extortion and a criminal market shuts down. International cooperation against ransomware. Cyber risk and higher education.
Data breach extortion seems to be an emerging...
Espionage by password spraying, and espionage via peanut butter sandwich. Ransomware and DDoS warnings....
Espionage by password spraying, and espionage via peanut butter sandwich. Ransomware and DDoS warnings. Two journalists get the Nobel Peace Prize
Teheran is running password spraying attacks (especially on Thursdays...
